LookupPrivilegeNameW, SetTokenInformation, ConvertStringSidToSidW, DuplicateTokenEx, CreateProcessAsUserW, AdjustTokenPrivileges, LookupPrivilegeValueW, CheckTokenMembership, CreateWellKnownSid, GetTokenInformation, OpenProcessToken, ControlService, DeleteService, CloseServiceHandle, StartServiceW, QueryServiceStatus, SetNamedSecurityInfoW, SetEntriesInAclW, BuildExplicitAccessWithNameW, GetNamedSecurityInfoW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegCloseKey, RegQueryValueExW, RegOpenKeyW, RegCreateKeyW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExW, OpenSCManagerW, OpenServiceW, RegOpenKeyExW

lstrlenW, WideCharToMultiByte, WaitForSingleObject, CreateEventA, SetEvent, InterlockedIncrement, InterlockedDecrement, LeaveCriticalSection, InterlockedExchange, GetLastError, EnterCriticalSection, InterlockedExchangeAdd, PostQueuedCompletionStatus, TlsAlloc, TlsFree, InitializeCriticalSection, DeleteCriticalSection, CreateEventW, GetCurrentThreadId, lstrlenA, SearchPathW, CreateProcessW, FindFirstFileW, FindNextFileW, FindClose, GetFileAttributesExW, SetFileAttributesW, DeleteFileW, GetFileAttributesW, GetSystemDefaultLCID, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, OutputDebugStringW, LoadLibraryW, GetProcAddress, FreeLibrary, GetModuleFileNameW, CreateDirectoryW, GetFileTime, CopyFileW, LocalFree, MultiByteToWideChar, ConnectNamedPipe, DisconnectNamedPipe, CreateNamedPipeW, CreateThread, WaitNamedPipeW, SetNamedPipeHandleState, WriteFile, WritePrivateProfileStringW, GetPrivateProfileIntW, GetPrivateProfileStringW, GetPrivateProfileSectionNamesW, CreateMutexW, CreateToolhelp32Snapshot, OpenProcess, TerminateProcess, Sleep, GetCurrentProcess, VirtualAllocEx, GetModuleHandleW, ReadProcessMemory, VirtualFreeEx, SetPriorityClass, SetThreadPriority, GetCurrentThread, Process32FirstW, Process32NextW, GetLogicalDriveStringsW, lstrcmpiW, QueryDosDeviceW, TerminateThread, ResumeThread, GetVersionExW, GetSystemInfo, GetSystemDefaultLangID, GetSystemDirectoryW, GetSystemWindowsDirectoryW, ProcessIdToSessionId, GlobalAlloc, DeviceIoControl, GlobalFree, GetVolumeInformationW, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, InitializeCriticalSectionAndSpinCount, RaiseException, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, InterlockedCompareExchange, DecodePointer, EncodePointer, OutputDebugStringA, CloseHandle, CreateFileW, ReadFile, SetFilePointer, GetFileSize, FormatMessageA, TlsGetValue, OpenEventA, ResetEvent, TlsSetValue, SystemTimeToFileTime, WaitForMultipleObjects, SetWaitableTimer, CreateWaitableTimerA, GetLocalTime, IsProcessorFeaturePresent

DllMain

DllMain

CoUninitialize, CoInitialize, CoCreateInstance, CoInitializeSecurity, CoSetProxyBlanket, CoInitializeEx, OleRun

SetSuspendState

EnumProcessModules, GetProcessImageFileNameW, EnumProcesses, GetModuleFileNameExW

UuidFromStringW

SHAddToRecentDocs, ShellExecuteExW, ShellExecuteW, SHGetFolderPathW, SHGetFolderPathAndSubDirW, SHFileOperationW, SHGetSpecialFolderPathW, Shell_NotifyIconW, SHGetDesktopFolder, SHChangeNotify

PathIsURLW, PathFileExistsW, StrCmpW, PathCombineW, PathFindFileNameW, PathCanonicalizeW, PathFindExtensionW, PathAppendW, PathRenameExtensionW, SHGetValueW, PathRemoveExtensionW, PathRemoveFileSpecW, PathIsDirectoryW, SHDeleteKeyW

ScreenToClient, MoveWindow, ExitWindowsEx, LockWorkStation, wsprintfW, GetSystemMetrics, DestroyIcon, MessageBoxW, GetParent, SendMessageW, FindWindowExW, FindWindowW, EnumWindows, IsIconic, ShowWindow, SetForegroundWindow, GetWindowThreadProcessId, DefWindowProcW, CreateWindowExW, PostMessageW, DestroyWindow, RegisterClassW, GetWindowRect

DestroyEnvironmentBlock, CreateEnvironmentBlock

VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW

timeSetEvent, timeKillEvent, PlaySoundW

WTSDisconnectSession